$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa File: a0db794e-874c-3530-8aea-c1d80271e2df.roa (raw, json) Hash identifier: hwidJWgLisj7jDoCZBIfBgfc3qVXD/aRCOMrvLQsgd8= Subject key identifier: 4C:2B:F6:F4:13:8E:1B:2F:20:40:0A:54:E7:09:8C:C9:DB:BE:52:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F43285849A4BA340C5B0A7D878C5DE680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 30036 IP address blocks: 173.23.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:34:0c:5b:0a:7d:87:8c:5d:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=f51ce9a3-ccae-4744-b9e7-589208f62f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:67:2a:7c:9b:00:1a:5e:8a:36:73:56:25:43: a6:1d:fe:85:ed:5b:89:d5:3e:9a:8e:76:de:0b:f2: 4c:e6:e3:76:5c:0f:4d:ea:c3:6c:68:b2:1a:f1:51: 7c:cf:0e:f9:17:27:dd:8f:a1:3d:d5:a0:3e:bc:c6: c6:08:5a:88:b3:c6:2e:78:44:a5:6a:08:af:25:6b: 44:40:57:0c:e7:6c:fa:ec:01:5b:b9:2c:b3:5a:ff: 29:df:14:09:87:ea:36:d0:95:5b:ea:78:fd:de:fa: 07:e2:d6:f3:74:51:6a:f6:d9:69:f1:a1:a1:87:54: e5:79:37:bb:8d:93:77:21:7e:fc:dd:7c:05:21:23: bd:14:0d:6d:3b:2e:3a:03:78:33:70:2c:4c:a8:62: 50:6b:97:b0:c2:c3:68:88:c4:e5:f4:77:1e:9d:83: 5e:5a:83:2a:35:be:9d:03:27:9f:f5:a8:ad:f3:2c: 6a:3b:ad:f0:9a:8a:ba:15:88:1c:ba:08:10:71:94: f1:bf:36:e8:43:de:95:dc:96:17:0b:78:a7:77:a6: 9e:9b:6c:57:83:b7:8d:0c:39:92:fe:01:a1:5a:e9: 4b:de:2d:a0:9f:64:c6:0c:e7:30:28:6a:0c:44:28: d2:56:93:18:11:04:68:3a:e0:2c:62:0f:a2:39:94: a8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2B:F6:F4:13:8E:1B:2F:20:40:0A:54:E7:09:8C:C9:DB:BE:52:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a0db794e-874c-3530-8aea-c1d80271e2df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bd:3d:8c:2b:bd:44:d1:0d:60:35:32:44:bc:6c:c6:88:b4: 3d:81:3b:3e:a6:91:57:14:99:71:84:cf:6e:19:68:3e:cb:d0: 6a:30:07:09:d5:dd:f6:ca:95:ff:42:3b:38:5a:46:93:7b:dd: 0d:9d:21:8d:c7:a0:19:33:9c:d6:d8:9c:16:fa:af:a9:b2:9c: b5:4a:ac:98:a1:31:95:b4:2f:59:f0:c1:cb:da:4f:90:9e:f1: eb:a7:8b:7c:b5:d1:da:01:7d:51:31:7c:d0:46:6f:b3:4a:5d: cb:49:ca:e0:94:6b:7e:d6:19:11:a9:7f:e8:9b:dc:e3:4b:50: eb:4e:86:eb:c7:0c:ac:9d:bf:b0:02:85:f6:f9:cd:71:a7:57: 6e:5a:cd:35:e2:81:e7:bc:17:d9:17:ec:f5:dd:86:b2:13:4e: df:f1:81:96:45:2d:bb:20:64:e4:30:ba:84:77:ed:7e:99:58: de:bd:29:70:b0:6b:cb:ba:6a:6a:cb:bf:a3:d8:eb:c5:ca:0f: 4b:de:bf:b7:4a:40:ab:bd:91:14:87:32:04:3a:ea:53:da:df: 66:5f:29:b1:a7:c5:d4:c6:14:30:81:40:3e:c5:a7:96:98:83: 59:09:4f:7e:f2:ed:6d:a3:7b:eb:2c:56:33:f3:b3:8d:04:5d: fa:a9:37:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkujQMWwp9h4xd5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZjUxY2U5YTMtY2NhZS00NzQ0LWI5ZTctNTg5MjA4ZjYyZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GcqfJsAGl6KNnNWJUOmHf6F7VuJ1T6ajnbe C/JM5uN2XA9N6sNsaLIa8VF8zw75Fyfdj6E91aA+vMbGCFqIs8YueESlagivJWtE QFcM52z67AFbuSyzWv8p3xQJh+o20JVb6nj93voH4tbzdFFq9tlp8aGhh1TleTe7 jZN3IX783XwFISO9FA1tOy46A3gzcCxMqGJQa5ewwsNoiMTl9HcenYNeWoMqNb6d Ayef9ait8yxqO63wmoq6FYgcuggQcZTxvzboQ96V3JYXC3ind6aem2xXg7eNDDmS /gGhWulL3i2gn2TGDOcwKGoMRCjSVpMYEQRoOuAsYg+iOZSoPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwr9vQTjhsvIEAKVOcJjMnbvlL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTBkYjc5NGUtODc0Yy0z NTMwLThhZWEtYzFkODAyNzFlMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO9PYwrvUTRDWA1MkS8bMaItD2BOz6mkVcUmXGEz24ZaD7L0GowBwnV 3fbKlf9COzhaRpN73Q2dIY3HoBkznNbYnBb6r6mynLVKrJihMZW0L1nwwcvaT5Ce 8euni3y10doBfVExfNBGb7NKXctJyuCUa37WGRGpf+ib3ONLUOtOhuvHDKydv7AC hfb5zXGnV25azTXigee8F9kX7PXdhrITTt/xgZZFLbsgZOQwuoR37X6ZWN69KXCw a8u6amrLv6PY68XKD0vev7dKQKu9kRSHMgQ66lPa32ZfKbGnxdTGFDCBQD7Fp5aY g1kJT37y7W2je+ssVjPzs40EXfqpN94= -----END CERTIFICATE-----Generated at Sun Apr 27 03:25:11 2025 by rpki-client